CVE-2023-32787: Opcfoundation Ua Java Legacy

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The OPC UA Legacy Java Stack before 6f176f2 enables an attacker to block OPC UA server applications via uncontrolled resource consumption so that they can no longer serve client applications.

Affected products

• Opcfoundation Ua Java Legacy: before 2023-04-28 (fixed in 2023-04-28)
• Prosysopc Ua Historian: before 1.2.0 (fixed in 1.2.0)
• Prosysopc Ua Modbus Server: before 1.4.20 (fixed in 1.4.20)
• Prosysopc Ua Simulation Server: before 5.4.2 (fixed in 5.4.2)

Published 2023-05-15. Last modified 2026-06-17.